Offensive360 MAST
Offensive360 MAST: A source-code-free MAST platform with broad binary and AI-risk coverage. Ranked #17 of 21 in Mobile Application Security Testing Software by our editors (7.4/10); pricing: Pricing on request; best for teams needing binary security and AI-risk checks.
At a glance
- Editor score7.4 / 10
- PricingPricing on request
- Best forTeams needing binary security and AI-risk checks
- Free planNo
- Mobile platformsBoth
- Facts checked20 Sep 2026
Where it wins
- Analyzes Android APK/AAB and iOS IPA binaries without source code
- Maps findings to OWASP Mobile Top 10 (2024) with evidence
- Detects secrets, SDK risks, known CVEs and AI/LLM endpoint risks
Where it doesn't
- Pricing is contact-sales rather than itemized public plans
- The listed integration is GitHub Actions
- On-premise deployment requirements are defined in the proposal
Our verdict on Offensive360 MAST
Offensive360 MAST analyzes compiled Android APK/AAB and iOS IPA packages for mobile application security weaknesses without requiring source code. It is aimed at enterprise security teams, including organizations in regulated industries, that need binary-level checks across mobile applications. Its scope covers permissions, hardcoded secrets and API keys, storage, communications, cryptography, platform configuration, embedded SDKs, trackers and known CVEs. Findings are mapped to the OWASP Mobile Top 10 (2024), with PDF reports that include severity, evidence and remediation guidance.
Pricing is handled through a custom proposal rather than itemized public plans. The Application Security plan can include SAST and DAST product options, supported languages and frameworks, finding evidence, remediation guidance, supported CI/CD integrations, an agreed scanning scope and support options. The On-Premise plan covers selected security products, an OVA virtual appliance, deployment in the customer’s infrastructure and an air-gapped deployment option. Integration requirements and support terms are reviewed as part of the proposal, while the published integration list includes GitHub Actions. There is no self-service free tier, although evaluation scans are available.
The standout capability is the breadth of package-level analysis: MAST combines mobile security checks with embedded SDK, tracker and known-CVE analysis, OWASP mapping, and detection of AI and LLM keys, model assets and endpoint risks. That makes it a fit for teams prioritizing compiled-binary review and deployment control, particularly where an on-premise or air-gapped virtual appliance is relevant. Teams seeking clearly published prices, a broader documented integration catalog or a narrowly focused self-service tool should look elsewhere.
Your product? Our editors can test Offensive360 MAST in depth and publish a review, labelled as paid · from $149/mo →
Offensive360 MAST pricing
All 2 Offensive360 MAST plans and prices →
Offensive360 MAST fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Mobile platforms | Both |
| Static binary analysis | Yes |
| Dynamic app analysis | Not verified |
| Sensitive-data flow | Not verified |
| Deployment model | Hybrid |
| Included apps | Not verified |
| Deployment | Cloud, Self-hosted |
| Compliance & security | SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS |
| Support | |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 1 integrations: GitHub Actions See all → |
| Pricing | Pricing on request (source) |
| Website | offensive360.com |
| Facts checked | 20 Sep 2026 |
Offensive360 MAST integrations
Offensive360 MAST lists 1 integrations on its own site.
- GitHub Actions
See all Offensive360 MAST integrations →
Alternatives to Offensive360 MAST
- AppknoxBroad hybrid testing for teams securing mobile apps across the development lifecycle.9.4
- OstorlabBroad mobile AppSec coverage with freemium entry and cloud delivery.9.3
- NowSecure PlatformDeep mobile runtime and binary analysis for teams securing release pipelines.9.2
See all Offensive360 MAST alternatives →
Used Offensive360 MAST? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Offensive360 MAST for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Offensive360 MAST is listed in our Mobile Application Security Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/offensive360-mast/"><img src="https://www.itechguides.com/best/badge/offensive360-mast.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update